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SEMICONDUCTOR DEVICE 
BACKGROUND OF THE INVENTTQM 

1. Field of the Invention 

The present Invention relates to security technology for 
a semiconductor device having a flash memory. 

2. Description of the Re lated Art 

Fig. 2 of the accompanying drawings illustrates a 
conventional nonvolatile semiconductor storage device 
disclosed in Japanese Patent Kokai {Laid-Open Publication) No. 
2001-14871. 

This nonvolatile semiconductor storage device 9 includes 
a flash memory main body 1, an information storage circuit 2, 
a command interface 3, a state machine 4, a data control circuit 
5, a read circuit 6 and a tri-state buffer 7. 

The flash memory main body 1 has three storage areas 
(blocks) for storing data, namely blocks (BLK) la, lb, and Ic. 
The information storage circuit 2 includes three protect cells 
2a to 2c for storing rewrite prohibition information for the 
blocks la to Ic, respectively. The information storage circuit 
2 also includes a security cell 2d for storing read prohibition 
information. The command interface 3 determines reading, 
writing or erasing of data from, to or in the flash memory main 
body 1 and controls the state machine 4 , on the basis of various 
control signals supplied from the outside. 

When cancellation of the security function is instructed, 
the state machine 4 checks the protect cells 2a to 2c in the 
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information storage circuit 2 to determine if the cells have 
been set to a rewrite prohibition state. If the cells are in 
the rewrite prohibition state, the state machine 4 disregards 
the protect setting to erase the data held in all of the blocks 
la to Ic in the flash memory main body !• 

The outputs of the blocks la to Ic of the flash memory main 
body 1 are connected to the tri- state buffer 7 via the read 
circuit 6 . The data control circuit 5 controls the data output 
from the tri- state buffer 7 on the basis of control signals 
supplied from the outside and the contents (data) of the 
security cell 2d of the information storage circuit 2. 

With this nonvolatile semiconductor storage device 9, it 
should be assumed now that the protection is set for all of the 
blocks la to Ic in the flash memory main body 1 by means of the 
protect cells 2a to 2c in the information storage circuit 2 in 
order to prevent the destruction of stored data by erroneous 
writing. Then, it should be assumed that the command interface 
3 is instructed to cancel the security function. 

When the cancellation instructions are sent to the state 
machine 4, the state machine 4 disregards the setting of the 
protection in the information storage circuit 2 and deletes the 
data held in all of the blocks la to Ic in the flash memory main 
body 1 . Thus , even if a third party knows a method for canceling 
the security function, the third party cannot see or obtain the 
stored data, and therefore the third party is unable to read, 
decipher or falsify the stored data. 

When accessing a block for which rewriting and reading are 
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prohibited, however, the data of all the blocks la to Ic in the 
flash memory main body 1 is always erased by the state machine 
4. If a microcomputer is designed to have this type of 
nonvolatile semiconductor storage device 9 and a CPU (central 
processing unit), the data in the block for which reading is 
prohibited cannot be read by the CPU. 
SUMMARY QF THE INVENTION 

According to a first aspect of the present invention, there 
is provided a semiconductor device including a first rewritable 
nonvolatile storage unit for storing data, and a second 
rewritable nonvolatile storage unit for holding security 
information that determines the feasibility (permission/ 
prohibition) of output ting to the outside of the data from the 
first storage unit. The semiconductor device further includes 
a control processing unit for reading the stored data from the 
first storage unit by indicating a storage region in the first 
storage unit. A first path extends from the first storage unit 
to the control processing unit. The data read from the first 
storage unit is supplied to the control processing unit via the 
first path so that the control processing unit performs control 
processing on the basis of the data supplied via the first path. 
A second path extends to the outside from the first storage unit. 
The semiconductor device also includes an output controller 
provided in the second path for controlling output of the data 
read from the first storage unit to the outside, on the basis 
of the security information. 

When a certain storage region in the first storage unit 
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is specified by the control processing unit, the data (content) 
stored In that region of the first storage unit is read and 
supplied to the control processing unit via the first path. At 
the same time, the security information is read from the second 
storage unit and supplied to the output controller. If, 
according to the security information, the outputting of the 
data to the outside is permitted, the data retrieved from the 
first storage unit is output to the outside via the second path. 
If, according to the security information, the outputting of 
the data to the outside from the first storage unit is 
prohibited, the data read from the first storage unit is not 
outputted to the outside. Consequently, the outputting of the 
stored data to the outside can be controlled by the security 
information, and the control processing unit is capable of 
reading the stored data of the first storage unit without 
erasing the data stored in the first storage unit. 

As described above, the semiconductor device Includes the 
output controller for controlling the outputting of the stored 
data to the outside from the first storage unit on the basis 
of the security information held by the second storage unit. 
As a result, the stored data which is protected by the security 
setting does not leak to the outside and the stored data can 
be used in control processing by the control processing unit 
without the stored data being erased. 

The first storage unit may Include a plurality of storage 
blocks, and the second storage unit may hold the security 
information for the respective storage blocks of the first 



4 



storage unit • 

The semiconductor device may further include a first 
selector for selecting a first address signal and a first 
control signal which are both supplied from the outside when 
a test mode is set. The first selector selects a second address 
signal and a second control signal which are both supplied from 
the control processing unit when a normal mode is set . The first 
selector then supplies the selected address and control signals 
to the first and second storage units. The semiconductor device 
may also include a second selector for selecting write data 
which is supplied from the outside when the test mode is set, 
and for selecting output data of the control processing unit 
when the normal mode is set. The second selector supplies the 
selected data to the first storage unit. 

Since the second storage unit holds the security 
information for the respective storage blocks of the first 
storage unit, security setting can be provided for the 
respective storage blocks. The first and second selection 
units directly connect the first storage unit to the outside 
at the time of the test mode. As a result, before the security 
setting is made, an operation test for the storage unit can be 
performed by using a test device. 

According to a second aspect of the present invention, 
there is provided a semiconductor device including a first 
rewritable nonvolatile storage unit for storing data, the first 
storage unit including a plurality of storage blocks. The 
semiconductor device also includes a second rewritable 
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nonvolatile storage unit for holding security information that 
determines permission/prohibition of outputting to the outside 
of the data stored in the respective storage blocks of the first 
storage unit . The semiconductor device also includes a control 
processing unit for reading the stored data from the first 
storage unit by indicating a certain storage block of the first 
storage unit. A first path extends to the control processing 
unit from the first storage unit so that the control processing 
unit performs control processing on the basis of the data 
transmitted from the certain storage block of the first storage 
unit via the first path. The control processing unit has a test 
function which, when a test signal requesting a boundary scan 
test is serially supplied from the outside, scans internal 
state information on the basis of the test signal and outputs 
this internal state information as serial data. The 
semiconductor device further includes a first selector for 
selecting a first address signal and a first control signal 
which are supplied from the outside when a memory test mode is 
instructed. The first selector selects a second address signal 
and a second control signal which are output by the control 
processing unit when a normal mode or boundary scan test is 
instructed. The first selector supplies the selected address 
signal and control signal to the first and second storage units. 
The semiconductor device further includes a second selector for 
selecting write data which is supplied from the outside when 
the memory test mode is instructed. The second selector selects 
output data of the control processing unit when the normal mode 
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or boundary scan test is Instructed. The second selector 
supplies the selected data to the first storage unit. The 
semiconductor device also includes a first data output 
controller provided in the first path for outputting the data 
retrieved from the first storage unit to the control processing 
unit irrespective of the security information when normal mode 
is instructed. The first data output controller controls 
output of the retrieved data to the control processing unit on 
the basis of the security information when a boundary scan test 
is instructed. A second path extends to the outside from the 
first storage unit. The semiconductor device also includes a 
second data output controller provided in the second path for 
controlling the retrieved data to the outside on the basis of 
the security information. 

The first data output controller controls output to the 
control processing unit of the data read from the first storage 
unit when the boundary scan test is instructed, on the basis 
of security information held by the second storage unit. As 
a result, there is no risk of leakage of the stored data under 
the security setting during the boundary scan test. 
BRIEF DESCRIPTIO N OF THE DRAWINGS 

Fig. 1 illustrates a schematic structure of a 
semiconductor device according to a first embodiment of the 
present invention ; 

Fig. 2 illustrates a schematic structure of a conventional 
nonvolatile semiconductor storage device; 

Fig. 3 illustrates a schematic structure of a 
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semiconductor device according to a second embodiment of the 
present invention; and 

Fig. 4 illustrates a block diagram of a flash memory shown 
in Fig. 3. 

DETAILED DESCRIPTION OF THE INVRNTTOM 
First EmbodiiTiftnl- 

Ref erring to Fig. 1, a block diagram of a semiconductor 
device according to a first embodiment of the present invention 
is illustrated. 

This semiconductor storage device 10 includes control 
processing means (CPU, for example) 11, and storage means 
(flash memories, for example) 12 and 13. The flash memories 
12 and 13 are nonvolatile memories which permit electrical 
batch erasure and writing. The flash memory 12 includes a 
plurality of storage blocks for storing processing programs, 
data and so forth. The flash memory 13 is used for setting 
security condition that allows or prohibits reading of the 
stored data to the outside from the respective storage blocks 
of the flash memory 12. 

An address signal ADR and a control signal CON which are 
issued from the CPU 11 are supplied to the input terminal A of 
selection means (selector (SEL), for example) 14, and a test 
address signal TAD and a test control signal TCN are supplied 
to the input terminal B of the selector 14 from the outside. 
The selector 14 selects the input terminal A when a normal mode 
(level "L", for example) is indicated by a mode signal MOD 
supplied to the control terminal and selects the input terminal 
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B when a test mode (level "H", for example) is Indicated by the 
mode signal MOD. Upon selection of the terminal A or B, the 
selector 14 outputs an address signal AD and a control signal 
CN« The address signal AD and the control signal CN are supplied 
to the flash memory 12. The control signal CN, and upper bits 
of the address signal AD which correspond with storage blocks 
of the flash memory 12 are then supplied to the flash memory 
13. 

Output data DO which is output by the CPU 11 is supplied 
to the input terminal A of a selector 15 and test write data 
TDW is supplied to the input terminal B of the selector 15 from 
the outside. Similarly to the selector 14, the selector 15 
selects the input terminal A or B in accordance with the mode 
signal MOD supplied to the control terminal of the selector 15, 
and outputs write data DW. The write data DW is then supplied 
to the flash memory 12. 

Read data DR which is read from the flash memory 12 is 
supplied directly to the CPU 11, as input data DI, via a path 
PI and is also supplied to the outside, as test read data TDR, 
via a path P2 . An output means (tri- state buffer, for example) 
16 is provided in the path P2 . The output of the tri-state 
buffer 16 is controlled by a security signal SC supplied from 
the flash memory 13 . When the security is OFF (when the security 
signal SC is "H" , for example) , the read data TDR is output from 
the tri-state buffer 16. When the security is ON (when the 
security signal SC is "L", for example) , the output side of the 
tri-state buffer 16 has a high impedance. 
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The semiconductor device 10 Includes a mode detector 17 
that detects a test signal TST supplied from the outside. The 
mode detector 17 sets the mode signal MOD to the test mode when 
the mode detector 17 detects that the test Is requested by the 
test signal TST. The mode detector 17 sets the mode signal MOD 
to the normal mode when the mode detector 17 detects that the 
test state Is not requested by the test signal TST. The mode 
detector 17 then supplies this mode signal MOD to the selectors 
14 and 15. 

The operation of the semiconductor device 10 will be 
described next. 

When the operation test of the flash memory 12 Is performed, 
the flash memories 12 and 13 are first batch-erased by an erase 
circuit (not shown). As a result, all the memory cells of the 
flash memories 12 and 13 are set to the "H" state. 

Subsequently, the semiconductor device 10 Is connected to 
a test device and the test state Is set by the test signal TST 
from the outside. Accordingly, the mode signal MOD becomes the 
test mode signal, and the Input terminals B are selected at the 
selectors 14 and 15, respectively. The test address signal TAD 
and the test control signal TCN are supplied to the flash memory 
12 together with the test write data TDW. Because all of the 
security signals SC supplied from the flash memory 13 are "H", 
the read data DR of the flash memory 12 is output to the outside 
as the test read data TDR via the trl-state buffer 16. 

After that, a predetermined test pattern Is written to the 
flash memory 12 by the test device, and a test of whether normal 
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(proper) reading and writing Is feasible is performed by 
retrieving the test pattern thus written. 

Predetermined programs and data are written to the flash 
memory 12 if the test operation shows that the flash memory 12 
functions properly. In order to set the security signal SC, 
which is applied to a region from which reading of the data to 
the outside is prohibited, to "L", "L" data is written to the 
corresponding bits of the flash memory 13. 

During the normal operation, the test signal TST is no 
longer applied, and the mode signal MOD becomes the normal mode 
signal. As a result, the input terminals A are selected at the 
selectors 14 and 15, respectively, and the address signal ADR 
and control signal CON from the CPU 11 are supplied, together 
with the output data DO, to the flash memory 12. The read data 
DR of the flash memory 12 is supplied to the CPU 11 as input 
data DI. The outputting of the read data DR to the outside is 
controlled in accordance with the security signal SC which is 
produced based on security information set in the flash memory 
13. 

As described above, the semiconductor device 10 of the 
first embodiment includes the path for passing the read data 
DR of the flash memory 12 to the CPU 11 as the input data DI. 
Consequently, even if retrieval of the stored data to the 
outside is prohibited by the security signal SC, the CPU 11 is 
capable of reading the data from the flash memory 12 without 
causing deletion of the data stored in the flash memory 12. 
Second Embodiment 
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Referring to Fig. 3, a semiconductor device of the second 
embodiment of the present Invention will be described. 

This semiconductor device 20 Includes a CPU equipped with 
a boundary scan test function ( JTAG CPU) 21, and a flash memory 
22 for storing processing programs and data and so forth. 

The CPU 21 has a JTAG (Joint Test Action Group) scan test 
function, and Includes terminals (ports) for serially 
Inputting and outputtlng a test signal TEST In addition to 
terminals for Inputting and outputtlng signals required for the 
ordinary operation of the CPU 21. 

The address signal ADR and control signal CON which are 
output ted by the CPU 21 are supplied to the input terminal A 
of a selector 23. The test address signal TAD and test control 
signal TCN are supplied from the outside to the input terminal 
B of the selector 23. The selector 23 selects the input terminal 
A when the normal mode is designated by the mode signal MOD 
supplied to the control terminal of the selector 23, and selects 
the input terminal B when the test mode is designated by the 
mode signal MOD. The selector 23 thus outputs the selected 
address signal AD and control signal CN to the flash memory 22. 

Output data DO from the CPU 21 is supplied to the input 
terminal A of a selector 24 and test write data TDW is supplied 
from the outside to the input terminal B of the selector 24. 
Similar to the selector 23, the selector 24 selects the input 
terminal A or B in accordance with the mode signal MOD supplied 
to the control terminal of the selector 24, and outputs write 
data DW to the flash memory 22. 
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Read data DR from the flash memory 22 is supplied to the 
CPU 21 as the input data DI via a tri- state buffer 25 provided 
in the path PI . The read data DR is also supplied to the outside 
as test read data TDR via a tri- state buffer 26 provided in the 
path P2 . 

The semiconductor device 20 also includes a mode detector 

27 which detects the test signal TST supplied from the outside 
and outputs the mode signal MOD in accordance with the operation 
state designated by the test signal TST, and a test detector 

28 which determines whether the test mode is requested on the 
basis of a JTAG test signal TEST supplied from the outside. The 
normal mode is set by the mode detector 27 during normal 
operation and during a boundary scan test operation. A memory 
test mode is set by the mode detector 27 when the flash memory 
22 is tested from the outside by using the test write data TDW 
and test read data TDR. 

The mode signal MOD from the mode detector 27 is introduced 
to the control terminals of the selectors 23 and 24 and also 
to the first input of a dual-input AND gate 29. The security 
signal SC is supplied from the flash memory 22 to the second 
input of the AND gate 29, and the output of the tri-state buffer 
26 is controlled by the output signal of the AND gate 29. 

The output signal of the test detector 28 is fed to the 
first input of a dual-input NAND gate 30. The security signal 
SC is supplied from the flash memory 22 to the second input of 
the NAND gate 30 after being inverted by an inverter 31. The 
output of the tri-state buffer 25 is controlled by the signal 
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supplied to the trl-state buffer 25 from the NAND gate 30. 

Fig. 4 illustrates the detail of an exemplary structure 
of the flash memory 22 shown in Fig. 3. 

The flash memory 22 includes an address buffer latch 
controller 41. The address signal AD and the control signal 
CN are supplied to the address buffer latch controller 41 from 
the selector 23. The flash memory 22 also includes two input 
buffers 42 and 43. The write data DW is supplied to the flash 
memory 22 from the selector 24. 

The address buffer latch controller 41 holds the address 
signal AD and divides the address signal into an upper address 
ADU and a lower address ADL. The upper and lower addresses ADU 
and ADL are introduced into a row decoder 44 and a column decoder 
45. The address buffer latch controller 41 also outputs, on 
the basis of the control signal CN, write control signals WE 
to the input buffers 42 and 43, and read control signals RE to 
tri-state buffers 50 and 51. The write control signals WE 
control the writing of data into the input buffers 42 and 43. 
The read control signals RE control the outputting of the read 
data DR. 

Memory arrays 46 and 47 are connected to the outputs of 
the input buffers 42 and 43, respectively. Each of the memory 
arrays 46 and 47 has a matrix of nonvolatile memory cells which 
permit electrical batch erasure and writing of the data. The 
memory array 46 is used to store processing programs and data 
and so forth. The matrix of memory cells in the memory array 
46 are divided into a plurality of blocks. The memory array 
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47 Is used to set security information (to establish a security 
condition) that determines permission or prohibition of 
reading of the data to the outside. The permission or 
prohibition of the data retrieval is determined for each of the 
blocks of the memory array 46. A signal from the row decoder 
44 which indicates the read/write region is supplied to each 
of the memory arrays 46 and 47. 

The output of the memory array 46 is connected to the column 
decoder 45 so that data corresponding to the lower address ADL 
is selected by the column decoder 45 and supplied to an output 
buffer 48. The output of the memory array 47 is coupled to an 
output buffer 49. The output signals of the output buffers 48 
and 49 are supplied to the outside as read data DR via the 
tri- state buffers 50 and 51 which are controlled by the read 
control signals RE from the address buffer latch controller 41. 
Also, the output signal of the output buffer 49 is issued as 
the security signal SC. 

The operation of the semiconductor device 20 will be 
described next. 

When a memory test for the flash memory 22 is performed, 
the memory arrays 4 6 and 47 in the flash memory 22 are first 
batch-erased by an erase circuit (not shown) . As a result, all 
the memory cells of the memory arrays 46 and 47 are set to the 
"H" state. 

The semiconductor device 20 is connected to a test device 
(not shown) and a test state is set by the test signal TST from 
the outside. Accordingly, the mode signal MOD becomes the 



15 



memory test mode ("H", for example) and the Input terminals B 
are selected at the selectors 23 and 24. Thus, the test address 
signal TAD and test control signal TCN are supplied together 
with the test write data TDW to the flash memory 22. Since the 
security signal SC issued from the memory array 4 7 is an "H" 
signal, the output signal of the AND gate 29 is an "H" signal, 
and the read data DR of the flash memory 22 is output to the 
outside, as the test read data TDR, via the tri- state buffer 
26. 

In this state, a predetermined test pattern is written to 
the flash memory 22 from the test device and a test of whether 
normal (proper) reading and writing is feasible is performed 
by retrieving the test pattern thus written. Predetermined 
programs and data are written to the memory array 46 if the 
memory test shows that the memory array 46 functions properly. 
In order to set the security condition to a region from which 
reading of the data to the outside is prohibited, "L" data is 
written to the corresponding bits of the memory array 47. 

Next, a boundary scan test is performed. VRien a boundary 
scan test mode is designated by the test signal TST during the 
boundary scan test, an "L" mode signal MOD is generated by the 
mode detector 27. This is the same as the normal mode. As a 
result, the input terminals A are selected at the selectors 23 
and 24, and the address signal ADR and control signal CON are 
supplied, together with the output data DO, to the flash memory 
22 from the CPU 21. The read data DR of the flash memory 22 
is supplied to the CPU 21 as the input data DI via the tri- 



16 



state buffer 25. The trl-state buffer 25 is controlled by the 
security signal SC and the detection signal of the test detector 
28. Since the mode signal MOD is an "L" signal, the output 
signal of the AND gate 29 is an "L" signal. At the same time, 
the tri-state buffer 26 has a high impedance and the output of 
the test read data TDR to the outside is stopped. 

In this state, when the test signal TEST for performing 
a boundary scan test is serially input to the CPU 21, the test 
state (request for test) is detected by the test detector 28 
and the output signal of the test detector 28 becomes a "H" 
signal . 

As a result of the execution of the boundary scan test, 
the flash memory 22 is accessed. As the flash memory 22 is 
accessed, the security signal SC of the accessed region is 
output from the flash memory 22. When reading of the data from 
the accessed region is prohibited, the security signal SC is 
an "L" signal. If the security signal SC is the "L" signal in 
this instance, the output signal of the NAND gate 30 is an "L" 
signal and the read data DR of the flash memory 22 is not 
supplied to the CPU 21. If, on the other hand, reading of the 
data from the accessed region is not prohibited, the security 
signal SC is an "H" signal and therefore the output signal of 
the NAND gate 30 is an "H" signal. Accordingly, the read data 
DR of the flash memory 22 is supplied to the CPU 21 as the input 
data DI . 

When normal operation mode is indicated by the test signal 
TST during normal operation, an "L" mode signal MOD is output 
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by the mode detector 21, As a result, the input terminals A 
are selected by the selectors 23 and 24, and the address signal 
ADR and control signal CON are supplied together with the output 
data DO to the flash memory 22 from the CPU 21. Because the 
boundary scan test mode is not detected by the test detector 
28, the output signal of the test detector 28 is "L" and the 
output signal of the NAND gate 30 is "H" irrespective of the 
security signal SC. Accordingly, the read data DR of the flash 
memory 22 is supplied to the CPU 21 as the input data DI via 
the tri-state buffer 25. Because the mode signal MOD is "L", 
the tri-state buffer 26 is subject to high impedance and the 
outputting of the read data DR to the outside is permitted. 

As described above, the semiconductor device 20 of the 
second embodiment includes the tri-state buffer 25 for 
determining whether, on the basis of security information which 
is set for the flash memory 22, the read data DR of the flash 
memory 22 should be supplied as the input data DI to the CPU 
21 during the boundary scan test. Accordingly, in addition to 
benefits like those for the first embodiment, there is 
additional benefit that, even if the CPU 21 has a boundary scan 
test function, there is no risk of data retrieval to the outside 
from the flash memory 22 as long as the security setting is done 
for the flash memory 22. 

It should be noted that the present invention is not 
limited to or by the above described embodiments. Various 
changes and modifications may be made to the described and 
illustrated embodiments by those skilled in the art without 
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departing from the scope of the present invention. Modified 
embodiments include the following, for example. 

The logic circuitry for controlling the tri- state buffers 
25 and 26 in Fig, 3 is not limited to the described circuitry. 
Any suitable circuitry can be used as long as the replacement 
circuitry permits the same control. 

In the described embodiment, the address buffer latch 
control unit 41 in Fig. 4 holds the address signal AD, divides 
the address signal AD into the upper address ADU and the lower 
address ADL, and supplies the write control signal and read 
control signal on the basis of the control signal CN. However, 
the control unit 41 may also have a function for compulsorily 
erasing the data in a region upon accessing that region if that 
region is a read-prohibited region. 
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